
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4639652-f4d8-436e-a7c2-86fe22b53a41.roa
File: d4639652-f4d8-436e-a7c2-86fe22b53a41.roa (raw, json)
Hash identifier: Ukzcxn3SpvBmc8qKJPBkZUp5nlVOJczgTBGVAOlH9GQ=
Subject key identifier: 04:DD:BC:E9:5F:CB:D6:0B:F5:40:B1:CF:88:81:D2:4C:16:9D:C7:BE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 40D1C939C2718B1A2B1429EFAC4AAA4B5C04793F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4639652-f4d8-436e-a7c2-86fe22b53a41.roa
Signing time: Tue 12 May 2026 00:30:11 +0000
ROA not before: Tue 12 May 2026 00:30:11 +0000
ROA not after: Mon 10 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d1:c9:39:c2:71:8b:1a:2b:14:29:ef:ac:4a:aa:4b:5c:04:79:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 12 00:30:11 2026 GMT
Not After : Aug 10 23:59:59 2026 GMT
Subject: serialNumber=7abf0ed07cfe11a377c68780e8986586c6a2c9892db9a2b3a0157f0f757ee9b8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:64:c8:aa:c8:ab:fd:49:ba:15:5d:62:ac:
ff:04:dc:73:fd:08:0e:77:39:bc:3b:6c:35:68:20:
83:d9:ff:d5:44:e5:42:c6:d1:03:f2:79:33:e7:b1:
9b:85:3d:99:13:a4:35:d3:96:4f:d6:14:73:cf:1e:
aa:dc:26:c0:0c:d6:52:f3:7c:21:b8:a1:2f:33:68:
31:91:41:09:a1:fc:01:6a:5b:75:ef:6b:2b:ba:60:
14:c3:c2:77:da:cb:2a:03:38:87:88:66:02:a7:6c:
7b:18:51:89:cf:ab:f3:59:3a:65:85:39:dd:33:71:
27:4d:5a:a5:a0:8c:6e:d2:19:fe:fc:cd:21:73:9a:
a8:49:5e:56:1f:b0:91:51:bc:86:0f:e2:d6:47:ce:
a0:e7:e3:6e:fb:b9:b6:06:87:fd:f7:a1:71:87:6b:
58:c7:2f:f4:57:f9:04:51:e8:47:09:a4:99:f6:fd:
e3:91:82:c8:05:a0:ea:d0:97:68:69:43:09:44:41:
36:49:58:c8:f1:d1:91:0b:4d:bd:e2:99:88:89:73:
0b:db:c2:3f:31:28:fb:ee:b2:ea:89:a5:4c:37:8e:
6c:40:37:19:37:81:e3:6a:ba:05:b2:bd:b4:68:05:
11:74:b2:f7:be:c2:f7:c3:9d:b6:49:38:81:5b:69:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DD:BC:E9:5F:CB:D6:0B:F5:40:B1:CF:88:81:D2:4C:16:9D:C7:BE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4639652-f4d8-436e-a7c2-86fe22b53a41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.228.0/24
Signature Algorithm: sha256WithRSAEncryption
06:39:85:96:d4:f0:6e:27:6e:c5:fe:89:76:2a:06:84:ea:9a:
4b:bc:75:6d:e7:0e:dd:7a:2d:6e:12:ce:32:8c:cf:ea:5c:b3:
e8:25:7a:d2:21:cd:c6:0d:7f:ac:e8:ae:3e:51:25:73:1e:d2:
26:f4:90:1d:02:52:9e:b0:ea:b5:8a:78:5d:17:e4:7e:94:aa:
54:92:de:f2:c7:56:63:78:cf:15:9b:d2:3e:77:07:0a:71:c2:
23:84:a4:08:02:05:cd:0e:f0:eb:b9:c0:17:f0:8d:81:a3:6e:
1c:ab:c5:24:66:18:93:c4:fa:65:81:b6:2a:a7:47:28:3f:f0:
34:b6:78:2f:86:56:38:d3:59:13:ae:76:d0:fd:15:49:f1:6f:
95:3e:94:45:2d:88:3f:81:e8:66:e2:8b:8c:aa:71:9a:11:00:
00:08:52:a6:45:12:1f:da:f4:d8:93:b0:aa:88:84:17:fa:be:
1c:c7:03:b7:c3:0e:de:ed:40:f0:27:e2:04:6c:45:13:35:a7:
be:af:a4:e4:9d:b7:06:c7:ec:67:2a:cf:6a:3e:2d:7b:cc:e6:
86:c4:be:b3:88:ec:96:06:d0:08:f1:85:fa:f3:2b:51:37:ee:
9c:93:9e:2d:00:0f:d7:b0:a9:45:13:d9:70:2d:e9:30:3f:5e:
b8:3b:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:53 2026 by rpki-client